[dm-crypt] Cryptsetup-reencrypt and data integrity.
arno at wagner.name
Wed Mar 8 22:30:22 CET 2017
as you need to do a backup anyways for this to be safe, it is
very easy to just verify the backup against the volume after
re-encryption one additional time.
If you do this without backup, your data is obviously
non-critical and so errors do not matter....
On Wed, Mar 08, 2017 at 20:55:24 CET, daniel at borek.me.uk wrote:
> I was playing with cryptsetup-reencrypt recently and I noticed it
> doesn't do any integrity checks on re-encrypted data and there is an
> assumption everything went fine once the command completes. Are there
> any plans to introduce integrity checks in the future? I understanding
> that verifying large volumes of data would be a time consuming task but
> lack of such option may be a show stopper for some setups.
> dm-crypt mailing list
> dm-crypt at saout.de
Arno Wagner, Dr. sc. techn., Dipl. Inform., Email: arno at wagner.name
GnuPG: ID: CB5D9718 FP: 12D6 C03B 1B30 33BB 13CF B774 E35C 5FA1 CB5D 9718
A good decision is based on knowledge and not on numbers. -- Plato
If it's in the news, don't worry about it. The very definition of
"news" is "something that hardly ever happens." -- Bruce Schneier
More information about the dm-crypt